Setting up a web application penetration testing laboratory
https://avasdream.engineer/terraform-hacking-lab
๐@malwr
https://avasdream.engineer/terraform-hacking-lab
๐@malwr
ExpiredDomains.com
avasdream.engineer โ Buy this expired domain | ED.com
AI fair value $119 vs ask $100 โ avasdream.engineer looks under-priced for a memorable .engineer.
Girl.scr (Erica Ransomware) Analysis
https://www.dropbox.com/s/f4uulu2rhyj4leb/Girl.scr\_malware\_report.pdf?dl=0
๐ฃdkaye_mal_anst18
Great analysis. May I ask what programs you tend to use for analysis? I normally have to rely on hybrid-analysis or other sites
๐คaprillols
๐@malwr
https://www.dropbox.com/s/f4uulu2rhyj4leb/Girl.scr\_malware\_report.pdf?dl=0
๐ฃdkaye_mal_anst18
Great analysis. May I ask what programs you tend to use for analysis? I normally have to rely on hybrid-analysis or other sites
๐คaprillols
๐@malwr
Dropbox
Girl.scr_AnalysisPaper.pdf
Shared with Dropbox
Getting Started with Ghidra: Analyzing Process Hollowing Shellcode from a Maldoc
I've posted a video introducing shellcode analysis with Ghidra. The shellcode comes from an (old) maldoc and uses the windows API to execute shellcode for process hollowing. We'll also look at a Ghidra script that helps with stack strings.
https://youtu.be/JE6QCS6no1Y
​
https://preview.redd.it/hly30srujao41.jpg?width=1199&format=pjpg&auto=webp&s=ce0f4a65f43af3f8b31a115c3645729be537504c
๐ฃjstrosch
๐@malwr
I've posted a video introducing shellcode analysis with Ghidra. The shellcode comes from an (old) maldoc and uses the windows API to execute shellcode for process hollowing. We'll also look at a Ghidra script that helps with stack strings.
https://youtu.be/JE6QCS6no1Y
​
https://preview.redd.it/hly30srujao41.jpg?width=1199&format=pjpg&auto=webp&s=ce0f4a65f43af3f8b31a115c3645729be537504c
๐ฃjstrosch
๐@malwr
YouTube
Getting Started with Ghidra: Analyzing Process Hollowing Shellcode from a Maldoc
In this video, we'll reverse engineering shellcode with Ghidra that was used by a maldoc to perform process hollowing. We'll begin by briefly discussing how ...
Phishing in the Time of COVID-19: How to Recognize Malicious Coronavirus Phishing Scams
๐ฃcyberg0100
๐@malwr
๐ฃcyberg0100
๐@malwr
Electronic Frontier Foundation
Phishing in the Time of COVID-19: How to Recognize Malicious Coronavirus Phishing Scams
Update 3-26-20: A new prevalent example of Android Spyware that leverages COVID-19 as a way to deliver their malicious product has been reported by researchers at Lookout. This particular malware,
Cobaltstrike 4.0 Cracked?
Initial post: https://twitter.com/underthebreach/status/1241840589626322946
Analysis: https://twitter.com/Plazmaz/status/1241971383480901632
If this is indeed out in public now, expect many "users" to migrate from 3.0 for malicious activities.
๐ฃPir00t
๐@malwr
Initial post: https://twitter.com/underthebreach/status/1241840589626322946
Analysis: https://twitter.com/Plazmaz/status/1241971383480901632
If this is indeed out in public now, expect many "users" to migrate from 3.0 for malicious activities.
๐ฃPir00t
๐@malwr
Twitter
Alon Gal (Under the Breach)
@msd0s7 I prefer to refrain from re-uploading it myself, though it did get re-uploaded on a different forum. * I DON'T VOUCH FOR THIS SPECIFIC LINK, BE CAUTIOUS! no one called him out so far so I do think it is legit but due diligence should be done on yourโฆ
Microsoft warns of 2 critical RCE vulnerabilities in all recent versions of Windows
๐ฃKanishkt23
MS intended to release patch in next month (14/April). That's very bad.
๐คHomemade-Cupcake
๐@malwr
๐ฃKanishkt23
MS intended to release patch in next month (14/April). That's very bad.
๐คHomemade-Cupcake
๐@malwr
Beazley Breach Briefing: Ransomware remains top cyber security threat for businesses
๐ฃwhat-s-up
๐@malwr
๐ฃwhat-s-up
๐@malwr
CRWE World
Beazley Breach Briefing: Ransomware remains top cyber security threat for businesses
Shift to home working heightens risk of cyber breach via remote desktop protocol and phishing attacksNew York, March 23, 2020 (GLOBE NEWSWIRE) -- Ransomware attacks skyrocketed in 2019, according to the latest Beazley Breach Briefing, an
All the IOC's this person has gathered which are used directly in coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns
๐ฃdigicat
Another reresource: https://www.activecypher.com/covid-19-cyberthreats/
๐@malwr
๐ฃdigicat
Another reresource: https://www.activecypher.com/covid-19-cyberthreats/
๐@malwr
GitHub
GitHub - parthdmaniar/coronavirus-covid-19-SARS-CoV-2-IoCs: All the IOC's I have gathered which are used directly involved coronavirusโฆ
All the IOC's I have gathered which are used directly involved coronavirus / covid-19 / SARS-CoV-2 cyber attack campaigns - GitHub - parthdmaniar/coronavirus-covid-19-SARS-CoV-2-IoCs: All t...